Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/9768CAB2550211EDA744F948C4F9AE02.roa
File: 9768CAB2550211EDA744F948C4F9AE02.roa (raw, json)
Hash identifier: yd9jWU/PgRjCMY4J3GKXf1Vc4SmZiu9tESmbJbAweg0=
Subject key identifier: 3B:DE:88:07:27:D4:4D:77:12:AB:E3:D3:2F:75:81:30:01:E7:39:C6
Certificate issuer: /CN=A91C4502/serialNumber=CB4C95F839E21D1DE0F458553D9A4CE28E414D88
Certificate serial: 08EA
Authority key identifier: CB:4C:95:F8:39:E2:1D:1D:E0:F4:58:55:3D:9A:4C:E2:8E:41:4D:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/9768CAB2550211EDA744F948C4F9AE02.roa
Signing time: Wed 14 May 2025 20:57:30 +0000
ROA not before: Wed 14 May 2025 20:57:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203283
IP address blocks: 2405:f3c0:600::/47 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 07:12:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2282 (0x8ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4502, serialNumber=CB4C95F839E21D1DE0F458553D9A4CE28E414D88
Validity
Not Before: May 14 20:57:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=682503b9-81d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:8d:0f:81:bf:39:f2:47:6f:70:d6:d2:88:
9d:60:2e:c0:b0:1f:3c:66:1a:8c:59:2a:7f:a1:ae:
bc:7f:4f:ef:40:78:6f:1e:38:6d:89:03:c7:18:51:
2b:34:70:91:61:76:09:01:07:b8:22:d5:f3:ee:db:
e4:ec:5e:0f:c7:48:5f:9f:9a:20:36:63:63:23:f4:
6a:94:f9:c4:eb:08:7d:49:81:fe:a9:e9:a4:4f:f2:
92:0c:cb:0a:83:f7:18:b3:a1:8b:1e:28:39:0d:61:
12:4b:0a:0e:b9:e8:a2:45:dd:2e:3e:94:c3:eb:cf:
ad:0b:18:3b:7b:2c:9e:c5:33:2b:c1:3e:67:5a:0e:
1c:a0:5f:48:6c:69:da:75:62:77:b1:9f:d5:68:86:
f7:ae:69:4a:8c:33:ba:2a:97:2f:3f:eb:f1:25:53:
cd:9a:d4:93:c0:43:bb:48:1d:b6:ba:e1:fc:ec:54:
fa:e3:64:11:84:c5:e2:9f:93:51:ef:36:0e:58:9d:
41:55:a3:0f:c1:13:69:44:3d:b8:5b:3d:6d:1a:5b:
e8:0a:a9:18:55:da:12:06:cd:bf:b9:e4:5e:12:58:
15:42:c3:97:06:b4:9a:62:9f:d4:c7:5e:1b:cd:71:
22:4d:dd:d1:7c:6c:4e:f6:2b:28:e8:f5:e7:54:5f:
9b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DE:88:07:27:D4:4D:77:12:AB:E3:D3:2F:75:81:30:01:E7:39:C6
X509v3 Authority Key Identifier:
keyid:CB:4C:95:F8:39:E2:1D:1D:E0:F4:58:55:3D:9A:4C:E2:8E:41:4D:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/9768CAB2550211EDA744F948C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:f3c0:600::/47
Signature Algorithm: sha256WithRSAEncryption
6f:8c:9d:19:71:0a:fb:b7:52:ad:97:a8:19:9f:9a:61:26:47:
76:f5:98:12:2c:06:95:a7:e2:54:68:c3:7e:bd:16:8c:cf:7a:
8b:0f:3b:97:a1:ce:76:9a:1b:72:5f:8b:1b:f6:1e:22:c3:01:
97:26:0f:20:0b:6f:3c:6d:49:c5:39:b0:b9:dd:74:c7:f2:c0:
4e:9c:d8:62:04:f7:ef:8f:57:13:20:d2:9f:95:d8:98:7b:93:
72:3c:fb:e6:cd:ad:39:9f:ec:7b:c2:19:3f:15:24:76:3d:78:
df:33:2c:e5:b9:23:5f:77:5d:33:78:9f:92:a7:50:62:02:77:
80:15:94:42:ef:c4:bc:0f:61:0a:b1:57:1d:93:ad:ff:46:bd:
ce:e7:e7:65:67:a2:11:31:01:b7:6e:bc:1f:e0:d6:99:69:ae:
28:50:6b:c7:9b:e3:9b:a9:11:87:b7:2f:57:65:57:54:72:91:
26:d9:e6:f6:9c:e6:db:2e:94:0d:55:f3:a4:8a:63:08:9c:a4:
17:1a:4f:0f:d7:ac:83:54:02:c0:da:3b:5c:d1:d0:5d:54:af:
35:ab:43:17:fe:57:f6:b0:a7:02:11:1c:84:95:e4:9d:a6:ad:
dc:69:05:56:ba:4b:d5:2c:16:a7:2d:20:23:ac:ad:7c:d8:e6:
b1:71:01:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:37:53 2025 by rpki-client